Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File:                     KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier:          evMEfU0r6T/7qFLDrjWpnR69bCmJMcFB5xwaKMqyXyE=
Subject key identifier:   55:91:E7:C6:C6:91:D7:8C:BB:48:E3:4C:EB:3D:13:58:B7:F4:7B:8F
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer:       /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number:          010A
Signing time:             Mon 01 Jun 2026 06:47:19 +0000
Manifest this update:     Mon 01 Jun 2026 06:47:18 +0000
Manifest next update:     Mon 08 Jun 2026 06:47:18 +0000
Files and hashes:         1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: zO3CbsyOvC21XQmGjaCdM4iwdFrqrPTsUkvylbsCtTA=)
                          2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: yevu27JexQC1pFGY5em0jam11butIck0VftNXiMexLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
                          rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
        Validity
            Not Before: Jun  1 06:47:18 2026 GMT
            Not After : Jun  8 06:47:18 2026 GMT
        Subject: CN=6a1d2af7-b495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:d3:f9:36:07:78:29:af:3f:3b:02:c7:b3:
                    4b:93:5f:6f:45:11:34:82:31:d2:39:6f:7d:be:6e:
                    b5:10:cb:7f:d0:94:9d:6f:9e:af:29:0b:62:59:88:
                    56:3f:dd:13:89:7a:a1:73:48:c4:e3:76:d2:01:96:
                    8d:f2:34:01:07:a9:46:55:6f:ee:9c:0c:f9:60:e6:
                    6b:52:29:18:86:ef:8b:55:51:3d:c0:a9:fe:fd:73:
                    d6:b2:80:b3:3e:92:b1:06:b7:11:a6:34:5e:24:ef:
                    7b:c7:f6:bb:a5:62:ca:53:0f:45:69:c1:e2:33:e1:
                    02:3b:ff:79:3f:c3:8d:a2:1c:22:09:77:55:64:74:
                    6a:46:30:cc:51:e1:a3:43:94:bb:d6:ac:b1:cc:c8:
                    d1:bb:26:d8:c2:77:17:a4:f7:be:49:22:5f:25:8c:
                    c4:09:5e:77:05:96:3c:00:7d:b7:a2:d0:39:16:55:
                    45:b9:6d:c9:93:e2:a0:cb:78:56:9a:6b:ef:6a:d8:
                    ba:2d:d1:b5:96:01:f8:15:ef:6b:33:5d:ed:31:3a:
                    f3:fb:85:93:42:24:f7:4d:a5:27:06:a7:4d:46:5b:
                    43:81:83:69:62:1d:40:08:27:28:c7:21:18:b3:8f:
                    3e:96:3c:ea:72:93:28:b4:77:13:69:53:3e:ea:00:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:91:E7:C6:C6:91:D7:8C:BB:48:E3:4C:EB:3D:13:58:B7:F4:7B:8F
            X509v3 Authority Key Identifier:
                keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:04:cc:dc:7d:6e:ae:6a:bb:cc:ee:a9:fe:63:50:73:6d:
         92:25:6b:05:90:05:1c:d5:46:c2:76:d7:8c:e8:43:69:6a:dd:
         b1:20:37:d2:69:89:54:3c:f5:ba:96:c3:17:39:71:bf:52:a7:
         be:5a:17:71:d9:aa:cb:65:cb:5a:ab:bf:f5:d1:48:d7:06:9d:
         0c:9b:00:cb:15:33:8a:60:8b:46:ea:32:88:65:9d:f4:bc:ae:
         30:a2:b2:ed:60:f1:35:eb:c6:0c:2b:24:cc:b6:67:23:4e:b6:
         51:55:ab:d5:1e:2c:4c:97:85:8e:39:f9:e1:50:ee:91:d7:db:
         c1:3c:b1:dc:1d:ad:ff:7c:8d:2c:af:b3:95:a5:c3:64:a6:b5:
         58:f6:31:99:2e:97:86:57:35:e8:ee:73:1d:2b:3e:de:d4:37:
         26:44:6f:86:a8:48:8f:2b:f6:3e:ee:93:d8:f2:11:8f:67:9e:
         04:7c:9e:52:19:63:80:47:6a:88:d7:77:6c:86:bc:23:33:d9:
         ca:7f:ee:12:67:fc:5e:70:dd:5a:6f:71:ab:71:52:70:df:ba:
         1a:cb:2e:6d:a0:38:43:bd:50:d7:eb:04:fd:71:5b:b5:3d:79:
         9b:15:e3:e3:22:8f:53:fa:3f:a0:4f:b0:92:54:e0:8f:9b:f7:
         94:3e:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:37 2026 by rpki-client